Security Report: git-hill-8dbd.1309760985.workers.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/da14eccc-d242-42ee-b5b9-836f8f536a10 Domain and IP registration (RDAP)/api/v1/rdap/da14eccc-d242-42ee-b5b9-836f8f536a10How often this domain was scanned/api/v1/domain/stats/git-hill-8dbd.1309760985.workers.dev Scan history for this domain/api/v1/domain/history/git-hill-8dbd.1309760985.workers.dev?limit=15

This website contacted 12 IPs in 2 countries across 5 domains to perform 171 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: http://git-hill-8dbd.1309760985.workers.dev/features/ai

Effective URL:

https://git-hill-8dbd.1309760985.workers.dev/features/ai

Redirected

AI Security Verdict

Moderate Risk

Confidence: 72%

Risk Score

Clone of GitHub's Copilot/AI page served from a workers.dev subdomain, falsely presenting itself as GitHub. No forms, no malware or threat-intel hits, but the brand impersonation makes it untrustworthy — do not enter credentials here.

Risk Factors (3)

Unauthorized use of the GitHub brand and page content on a non-GitHub domain (workers.dev subdomain)

Hosting-platform subdomain of unknown actual creation date that impersonates a well-known developer brand

GitHub is not in the site's own domain, so any future login/credential prompt on this host would be untrustworthy

Safety Factors (4)

No credential, login or payment forms present in the captured DOM

No Indicators of Compromise, YARA malware matches, or known malicious kit signatures

No cross-origin credential exfiltration or obfuscated script behaviour observed

Static clone of public marketing content rather than an interactive data-collection flow

Domain age information unavailable

Details

Page Title

GitHub AI · AI built into every step of your workflow · GitHub

Scan Type

public

Domain Name Analysis

Domain 'git-hill-8dbd.1309760985.workers.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'git-hill-8dbd.1309760985'. The registrable portion 'workers' spans 7 characters holding two vowels versus 5 consonants. Word splitting yields one word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.40s

Total Load Time

3.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:6,000 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software66% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

66%

documentation technical

39%

forum community discussion

33%

Detected Features

OG: object

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
17	172.67.165.18Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
14	104.21.11.24Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
14	185.199.108.215Fastly · CDN	United States	AS54113Fastly, Inc.
14	3.174.46.65Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
14	140.82.112.21	United States	AS36459GitHub, Inc.
14	140.82.121.5	Frankfurt am Main, Hesse, Germany	AS36459GitHub, Inc.
14	185.199.109.215Fastly · CDN	United States	AS54113Fastly, Inc.
14	185.199.110.215Fastly · CDN	United States	AS54113Fastly, Inc.
14	185.199.111.215Fastly · CDN	United States	AS54113Fastly, Inc.
14	3.174.46.20Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
171	12	-	-